A new adware family named Crusader will rewrite tech support phone numbers returned in Google search results, display ads, and show popups pushing tech support scams.
Current versions of Crusaders are installed on victims' computers via software bundles. Users usually download a free application, whose installer also adds Crusader.
The adware takes the form of a Chrome extension, Firefox add-on, and Internet Explorer Browser Helper Object. Because it's delivered as a browser extension, Crusader is in the privileged position of listening and modifying the user's entire Internet traffic.https://www.bleepingcomputer.com/news/security/adware-replaces-phone-numbers-for-security-firms-returned-in-search-results/